{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-07T17:33:59.312Z","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp","markdownUrl":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp.md","server":{"slug":"ashadow07-karmadue","name":"KarmaDue","registryName":"io.github.ashadow07/karmadue","description":"Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"functions-v1-mcp","type":"remote","identifier":"https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp","version":"1.1.3","transport":null,"scoredAt":"2026-11-07T08:10:19.974Z"},"score":{"total":63,"tier":"medium","status":"scored","weekDelta":0,"history":[{"date":"2026-11-07","total":63},{"date":"2026-11-06","total":63},{"date":"2026-11-05","total":63},{"date":"2026-11-04","total":63},{"date":"2026-11-03","total":63},{"date":"2026-11-02","total":63},{"date":"2026-11-01","total":63},{"date":"2026-10-31","total":63},{"date":"2026-10-30","total":63},{"date":"2026-10-29","total":63},{"date":"2026-10-28","total":63},{"date":"2026-10-27","total":63},{"date":"2026-10-26","total":63},{"date":"2026-10-25","total":63},{"date":"2026-10-24","total":63},{"date":"2026-10-23","total":63},{"date":"2026-10-22","total":63},{"date":"2026-10-21","total":63},{"date":"2026-10-20","total":63},{"date":"2026-10-19","total":63},{"date":"2026-10-18","total":63},{"date":"2026-10-17","total":62},{"date":"2026-10-16","total":62},{"date":"2026-10-15","total":62},{"date":"2026-10-14","total":64},{"date":"2026-10-13","total":63},{"date":"2026-10-12","total":63}]},"categories":[{"name":"Endpoint Security","score":63,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_undeclared","args":{"undeclared_tools":"1"}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":62,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 717 tokens (~239/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"239","items":"3","tools":"3","tokens":"717","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"fail","reasons":["Stability check failed: schema churn in the 26 days we've observed: 115 tool removals, 0 breaking changes, 0 auth/transport breaks, 3 additions."],"codes":[{"code":"stability.churn","args":{"days":"26","added":"3","breaks":"0","removed":"115","auth_transport":"0"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":["Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe."],"malware":[],"components":[{"slug":"functions-v1-mcp","type":"remote","identifier":"https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp","withdrawn":false,"score":63,"current":true,"url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp","markdownUrl":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp.md"},{"slug":"functions-v1-mcp-connector","type":"remote","identifier":"https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp/connector","withdrawn":false,"score":77,"current":false,"url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp-connector","markdownUrl":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp-connector.md"},{"slug":"karmadue-mcp","type":"remote","identifier":"https://karmadue--mcp.expo.app/mcp","withdrawn":false,"score":77,"current":false,"url":"https://verifymcp.io/servers/ashadow07-karmadue/karmadue-mcp","markdownUrl":"https://verifymcp.io/servers/ashadow07-karmadue/karmadue-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.1.3"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"check_install","title":null,"description":"Read-only. Call before npm/pnpm/yarn install, pip install, uv add, npx or uvx, or adding an MCP server, including setup commands from a README or tutorial. Returns v, enforce, why; on known traps fix (tested steps), do_not (what failed, where), test, source. enforce=block: stop. enforce=ask: ask your person first. v=fix_first: use fix, not your command. Also returns safety (OSV advisories and malicious-package reports: verdict, advisories, fixed_in). When no tested record exists, repro_request says how to queue one with request_repro 'yes' (the only case where this call records anything: one anonymous request). Missing evidence is not safety clearance. Skip packages already pinned in a lockfile you are not changing.","inputs":[{"name":"detail","type":"string","required":false,"description":"Optional. 'full' adds tested_on, untruncated notes, records and links."},{"name":"ecosystem","type":"string","required":true,"description":"Package ecosystem of the target: npm (npm, pnpm, yarn, npx), pypi (pip, uv, uvx) or mcp (an MCP server you are about to add, or a bare name that may exist in more than one ecosystem). A bare name fou…"},{"name":"request_repro","type":"string","required":false,"description":"Optional. 'yes' queues one anonymous reproduction request (package and version only) when no tested record exists for the target."},{"name":"runtime_env","type":"string","required":false,"description":"Optional, e.g. node 20 linux."},{"name":"target","type":"string","required":true,"description":"Package or server as you would install it, e.g. tailwindcss@4, psycopg2, @modelcontextprotocol/server-filesystem."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":376},{"name":"search_recipes","title":null,"description":"Call when an install, build or import fails, before retrying or guessing a fix. Paste the key error line; returns tested fixes.","inputs":[{"name":"error_signature","type":"string","required":true,"description":"The key error line, verbatim."},{"name":"runtime_env","type":"string","required":false,"description":"Optional, e.g. python 3.13 macos."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":72},{"name":"report_leaf","title":null,"description":"Only if your owner opted in: after an install finishes, report pass or fail and the command. Reviewed before use.","inputs":[{"name":"command_run","type":"string","required":true,"description":"The exact install command you ran, e.g. npm i -D tailwindcss@4. No secrets or tokens."},{"name":"runtime_env","type":"string","required":true,"description":"Your setup, e.g. node 20 linux or python 3.13 macos."},{"name":"status","type":"string","required":true,"description":"Outcome of the install: pass if it finished and worked, fail if it errored."},{"name":"stderr_snippet","type":"string","required":false,"description":"Optional. The key error lines if it failed, verbatim. Never include secrets, tokens or personal data."},{"name":"target","type":"string","required":true,"description":"Package or server you installed, as you passed it to check_install, e.g. tailwindcss@4 or @modelcontextprotocol/server-filesystem."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":181}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-07T08:10:19.000Z","track":"remote","endpoint":"https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=supabase.co","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-24T13:22:36Z","notAfter":"2027-01-22T14:22:32Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"ogogoizwsfaduzehkshb.supabase.co.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"co.","outcome":"verified","label":"Verified"},{"zone":"supabase.co.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-12","recent":[{"id":"chg_01a1afe8-9e57-775a-9c22-54a545437121","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a1afe8-9e57-775a-9c22-54a545437121"},{"id":"chg_01a15337-c106-7bf7-8c19-40a92396dbdc","kind":"param.added_optional","summary":"“check_install” added an optional parameter “detail”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a15337-c106-7bf7-8c19-40a92396dbdc"},{"id":"chg_01a14fbe-477e-70b8-9702-8514fc84f374","kind":"check.measure","summary":"Tool coverage (50% → 100%)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-477e-70b8-9702-8514fc84f374"},{"id":"chg_01a14fbe-4718-72c0-aede-afbc56e4ba9b","kind":"check.measure","summary":"Schema quality (139 → 231)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-4718-72c0-aede-afbc56e4ba9b"},{"id":"chg_01a14fbe-4781-7126-bb3f-0e0700428ead","kind":"param.description_changed","summary":"“report_leaf” reworded the description of “runtime_env”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-4781-7126-bb3f-0e0700428ead"},{"id":"chg_01a14fbe-4782-75fe-8f35-6d077d40880b","kind":"score.total_changed","summary":"Trust score (62 → 63)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-4782-75fe-8f35-6d077d40880b"},{"id":"chg_01a14fbe-4782-7162-ae56-c015b2d1a0d8","kind":"param.description_changed","summary":"“report_leaf” reworded the description of “target”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-4782-7162-ae56-c015b2d1a0d8"},{"id":"chg_01a14fbe-4781-7b0a-9ecf-d261c19d3056","kind":"param.description_changed","summary":"“report_leaf” reworded the description of “stderr_snippet”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-4781-7b0a-9ecf-d261c19d3056"},{"id":"chg_01a14fbe-4781-75af-8b76-06ed7bf4775e","kind":"param.description_changed","summary":"“report_leaf” reworded the description of “status”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-4781-75af-8b76-06ed7bf4775e"},{"id":"chg_01a14fbe-4780-7953-9a51-3b57fb416417","kind":"param.description_changed","summary":"“report_leaf” reworded the description of “command_run”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-4780-7953-9a51-3b57fb416417"},{"id":"chg_01a14fbe-4780-7373-a3f8-bbfc6f098370","kind":"param.added_optional","summary":"“check_install” added an optional parameter “request_repro”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-4780-7373-a3f8-bbfc6f098370"},{"id":"chg_01a14fbe-477f-7c7e-aacd-aacca2b941f3","kind":"param.description_changed","summary":"“check_install” reworded the description of “ecosystem”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-477f-7c7e-aacd-aacca2b941f3"},{"id":"chg_01a14fbe-477f-73d0-a243-fe26b570b276","kind":"tool.description_changed","summary":"Tool “check_install” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a14fbe-477f-73d0-a243-fe26b570b276"},{"id":"chg_01a13e9b-c25b-7005-b9ff-b30e0fc24e3f","kind":"tool.removed","summary":"Tool “post_recipe” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a13e9b-c25b-7005-b9ff-b30e0fc24e3f"},{"id":"chg_01a13e9b-c2ac-7ddf-a400-98cadc30a636","kind":"tool.removed","summary":"Tool “post_verification_ask” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a13e9b-c2ac-7ddf-a400-98cadc30a636"},{"id":"chg_01a13e9b-c2b0-7797-9d9a-c6e3dbff46a9","kind":"tool.removed","summary":"Tool “propose_challenge” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a13e9b-c2b0-7797-9d9a-c6e3dbff46a9"},{"id":"chg_01a13e9b-c2b4-76b5-a8f3-038b1d8479b6","kind":"tool.removed","summary":"Tool “propose_split” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a13e9b-c2b4-76b5-a8f3-038b1d8479b6"},{"id":"chg_01a13e9b-c2b4-7dee-a27e-fda0ebea50b0","kind":"tool.removed","summary":"Tool “propose_terms” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a13e9b-c2b4-7dee-a27e-fda0ebea50b0"},{"id":"chg_01a13e9b-c2b5-7a1a-834e-6d9acfae4397","kind":"tool.removed","summary":"Tool “publish_ask” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a13e9b-c2b5-7a1a-834e-6d9acfae4397"},{"id":"chg_01a13e9b-c2b6-7102-9005-45d881a9793b","kind":"tool.removed","summary":"Tool “quick_watch” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp#chg-chg_01a13e9b-c2b6-7102-9005-45d881a9793b"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp","markdown":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp.md","changelogJson":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/ashadow07-karmadue/functions-v1-mcp.xml","external":[{"label":"Remote endpoint","href":"https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp"},{"label":"Repository","href":"https://github.com/ashadow07/karmadue"},{"label":"Website","href":"https://karmadue.expo.app/docs/mcp"}]}}